Check an IP Address, Domain Name, Subnet, or ASN

89.20.104.201 was found in our database!

$ whois 89.20.104.201

country·🇷🇺 Russia

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 89.20.104.201scoring →

confidence

77%High

first_seen·Feb 5, 2026

last_seen·1h ago

sessions·10

events·88

$ sikker protocols 89.20.104.201

TELNET

10 / 88

$ sikker summary 89.20.104.201

89.20.104.201 has a threat confidence score of 77%. This IP address from Russia (AS12389, Rostelecom) has been observed in 10 honeypot sessions targeting TELNET protocols. First observed on February 5, 2026, most recently active March 24, 2026.

$ sikker primitives 89.20.104.201

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh12 telnet_cd_absolute_path_change11 telnet_command_ping6 telnet_command_shell6 telnet_command_enable6 telnet_command_system6 telnet_command_linuxshell6 telnet_busybox_binary_invocation6 telnet_command_iptables_flush2 telnet_rm_recursive_hidden_relative_cleanup2 telnet_system_command_invocation1 telnet_hidden_dev_file_output_redirection1 telnet_hidden_etc_file_output_redirection1 telnet_hidden_mnt_file_output_redirection1 telnet_hidden_tmp_file_output_redirection1 telnet_hidden_usr_file_output_redirection1 telnet_hidden_var_file_output_redirection1

$ sikker related 89.20.104.201

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
5.141.80.206	94%	158
188.128.75.50	100%	553
2.63.211.145	79%	20,372
83.171.105.56	31%	138
95.189.105.95	81%	115

IP Address	Confidence	Events
80.66.83.43	100%	5,186
77.94.120.206	100%	8,230
172.68.10.89	6%	3
172.68.10.225	9%	11
172.68.10.126	15%	11